Symantec Data Loss Prevention in Hyper-V

I want to install (actually making some testing already) Symantec Data Loss Prevention in Microsoft Hyper-V virtual environment. I know that it is recommended to use VMware for that, but we already have three Windows 2008 R2 Ent servers so Hyper-V is already licensed.

Questions:

What is the best practice to set up Symantec Data Loss Prevention in Hyper-V?

What are possible issues I could face performing such kind of setup?

I know that virtualisation of Network monitor is not possible, and for Oracle - not recommended.

I've tried to get it working in Hyper-V before and had real issues. For what it's worth, I could get Enforce and Oracle going okay. Discover servers worked okay EXCEPT for Network Monitor. I could not find a way to dedicated a NIC via SPAN to get the data up to Monitor. If there is a way to put a NIC on Hyper-V in promiscuous mode, then best of luck.

Aaron

If this post has helped you, please vote up or mark as solution to help others looking for the same data.

Aaron, thank you. I think that if I could manage to get some part of SDLP working in virtual environment - I will be happy with that. Symantec says that one couldn't put Network Monitor in virtual environment though. It requires physical server with 2 physical network interfaces.

This is true, but I've done it on VMware and XenServer without much issue. You just have to dedicate a NIC to the VM and ensure it can handle the traffic. I think in moderate to low traffic environments, it should be okay. If you get to somewhere that has 10 Gig traffic or needed a special NIC to handle the load, I would certainly make it hardware-based.

Aaron

If this post has helped you, please vote up or mark as solution to help others looking for the same data.

i have built a entire 6k node of SDLP in vmware EXCEPT network monitor, they have had to much traffic to work. The client chose vmware as it can scal with them as they continue to grow, and can add resources as needed very quickly.